Hello everyone, I would also like to be part of the security team and mailing list as an opinion guy and why not even more
Στις Τετ, 25 Σεπ 2019 στις 11:09 π.μ., ο/η Sven Vogel <s.vo...@ewerk.com> έγραψε: > How I can join to the security list? > > > __ > > Sven Vogel > Teamlead Platform > > EWERK DIGITAL GmbH > Brühl 24, D-04109 Leipzig > P +49 341 42649 - 99 > F +49 341 42649 - 98 > s.vo...@ewerk.com > www.ewerk.com > > Geschäftsführer: > Dr. Erik Wende, Hendrik Schubert, Frank Richter > Registergericht: Leipzig HRB 9065 > > Zertifiziert nach: > ISO/IEC 27001:2013 > DIN EN ISO 9001:2015 > DIN ISO/IEC 20000-1:2011 > > EWERK-Blog | LinkedIn | Xing | Twitter | Facebook > > Auskünfte und Angebote per Mail sind freibleibend und unverbindlich. > > Disclaimer Privacy: > Der Inhalt dieser E-Mail (einschließlich etwaiger beigefügter Dateien) ist > vertraulich und nur für den Empfänger bestimmt. Sollten Sie nicht der > bestimmungsgemäße Empfänger sein, ist Ihnen jegliche Offenlegung, > Vervielfältigung, Weitergabe oder Nutzung des Inhalts untersagt. Bitte > informieren Sie in diesem Fall unverzüglich den Absender und löschen Sie > die E-Mail (einschließlich etwaiger beigefügter Dateien) von Ihrem System. > Vielen Dank. > > The contents of this e-mail (including any attachments) are confidential > and may be legally privileged. If you are not the intended recipient of > this e-mail, any disclosure, copying, distribution or use of its contents > is strictly prohibited, and you should please notify the sender immediately > and then delete it (including any attachments) from your system. Thank you. > > Am 24.09.2019 um 18:49 schrieb John Kinsella <jlkin...@gmail.com>: > > > > HI. WHAT'S WITH THE YELLING? :) > > > > I'm already on security@ and I actively monitor what goes there. About > > 6 weeks ago a message came through which I missed and nobody else > > responded to until ASF security reminded us about the post this > > morning. > > > > While having people who "can/will do something" about issues, usually > > with appsec you want people who can understand the security aspects, > > and then engage developers familiar with the code to help with a fix. > > Those who can fulfill both roles are a plus, but not required. > > > > John > > ps - your email went into my spam folder... > > > > On Tue, Sep 24, 2019 at 5:04 AM Paul Angus <pau...@apache.org> wrote: > >> > >> HELLO? > >> > >> > >> > >> Have we enough ‘active’ security representatives? > >> > >> > >> Please respond if you are ALREADY on the security maililing list and > are still willing/able to assist with CloudStack security issues. > >> > >> OR > >> > >> You AREN'T already on the security mailing list, but would like to > assist with security issues. Please note 'people with opinions' are > welcome, but we very much need 'people who can/will do something about' any > issues which are identified. > >> > >> > >> Kind regards > >> > >> > >> Paul Angus > >